Cryptojacking – what is it, how to detect and prevent it Cryptojacking is one of the fastest-growing malicious activities, in which infected devices are used to secretly mine for cryptocurrencies. The crypto-mining malware largely responsible for such malpractice usually uses just enough system resources to remain hidden for as long as possible. It is estimated that the majority of these malwares are deployed through web-based scripts within websites – a type of approach called web-based cryptojacking (aka. drive-by cryptomining).
The inception of web-based crypto jacking can be traced back to September 2017 when a crypto-miner called CoinHive was officially released. The malicious code is compatible with all major browsers and is relatively easy to deploy. Its aim is allegedly noble – to allow website owners to monetize their freely available content without relying on displeasing ads.
However, CoinHive and its subsequent modifications are now being increasingly used by cybercriminals to maliciously inject crypto-miners into hacked websites (without the owner’s knowledge or permission). To make matters worse, such scripts are not limited to web pages, but are also found on public WiFi networks, YouTube Ads, and other online services.
In order to detect and prevent cryptojacking activities, it is important to first understand how these malicious codes affect the device’s performance and the user’s experience. The most visible signs are usually decreased CPU usage and an increase in fan noise. It is recommended to install web browser extensions, such as MinerBlock, NoCoin, and Adblocker. An updated antivirus, along with the latest OS patches, is also advised for those who want to protect their computer against cryptomining malware.
For businesses and larger organizations, it is essential to educate employees about cryptojacking and phishing techniques, such as malicious emails and spoof websites. Cybersecurity teams should also be well-informed of the various methods used by attackers, as well as the countermeasures available.
Cryptojacking seems to have a short lifespan – as it is no longer the most prevalent threat, due to the rapid response of cybersecurity companies. Nevertheless, it is important to be vigilant and take preventive measures in order to protect our devices from cryptomining malware.